---
title: "Get Guest Token"
method: POST
path: "/api/auth/guest-token"
tags: ["Authentication"]
---

# Get Guest Token

`POST /api/auth/guest-token`

## Request

- Base URL: `https://api.pensiata.me` (the document declares no server; this is the origin it was published from)
- URL: `https://api.pensiata.me/api/auth/guest-token`
- Auth: none declared

Get a temporary guest token for frontend access.

No authentication required. Issues a short-lived JWT token (30 minutes)
that allows the frontend to make API calls on behalf of anonymous users.

This enables:
- Public website access without user registration
- Protection against direct API abuse (tokens expire quickly)
- Rate limiting per session

Frontend should:
1. Call this endpoint on app load
2. Store the token (localStorage/memory)
3. Include in all API requests: Authorization: Bearer <token>
4. Refresh before expiration (tokens expire in 30 minutes)

## Response `200`

Successful Response

---

[API](https://skmtc.dev/pensiata/apis/bulgarian-pension-fund-data-api.md) · [All operations](https://skmtc.dev/pensiata/apis/bulgarian-pension-fund-data-api/llms.txt) · [OpenAPI document](https://skmtc.dev/pensiata/apis/bulgarian-pension-fund-data-api/revisions/cd24747298ae?raw)
